Bump the dotnet group with 5 updates

[dependabot]

Updated Microsoft.Extensions.AI from 10.7.0 to 10.8.1.

Release notes

Sourced from Microsoft.Extensions.AI's releases.

10.8.1

This servicing release updates the Microsoft.Extensions.AI, Microsoft.Extensions.AI.Abstractions, and Microsoft.Extensions.AI.OpenAI packages to 10.8.1 with two targeted fixes: correct tool-call/tool-result ordering when resuming approval-gated functions with service-managed chat history, and preservation of the OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning.

Packages in this release

Package	Version
Microsoft.Extensions.AI	10.8.1
Microsoft.Extensions.AI.Abstractions	10.8.1
Microsoft.Extensions.AI.OpenAI	10.8.1

What's Changed

AI

• Fix FICC tool_calls/tool ordering with approvals and service-managed chat history #​7617 by @​westey-m
• Roundtrip OpenAI Responses reasoning item id for stateless (store=false) encrypted reasoning #​7629 by @​rogerbarreto (co-authored by @​tarekgh)

Acknowledgements

• @​jozkee reviewed pull requests

Full Changelog: dotnet/extensions@v10.8.0...v10.8.1

10.8.0

This release adds new experimental APIs to Microsoft.Extensions.AI.Abstractions and updates the OpenAI dependency to 2.12.0, alongside documentation, test, and repository maintenance.

Experimental API Changes

New Experimental APIs

• New experimental API: AIFunctionNameAttribute and AIParameterNameAttribute #​7610 by @​jozkee (co-authored by @​jeffhandley @​Copilot)
• New experimental API: ToolApprovalRequestContent.RequiresConfirmation (MEAI001) #​7549 by @​javiercn (co-authored by @​Copilot)

What's Changed

AI

• Upgrade OpenAI dependency to 2.12.0 #​7608 by @​jozkee (co-authored by @​Copilot)
• Auto-detect audio format in OpenAISpeechToTextClient #​7575 by @​jozkee (co-authored by @​Copilot)
• Fix ImageGeneratingChatClient duplicating preceding content and dropping following content #​7624 by @​jozkee (co-authored by @​Copilot)

Vector Data

• Make all test methods virtual in VectorData.ConformanceTests #​7606 by @​adamsitnik (co-authored by @​Copilot)

Documentation Updates

• Remove links to ai-samples repo #​7574 by @​gewarren
• Fix up docs with Copilot (MEVD) #​7597 by @​gewarren
• Fix up docs with Copilot (M.E.ServiceDiscovery) #​7598 by @​gewarren (co-authored by @​Copilot)
• Fix up docs with Copilot (MEAI) #​7600 by @​gewarren
• Fix up docs with Copilot #​7601 by @​gewarren

Test Improvements

• Fix flaky StampedeTests and harden related test waits #​7572 by @​jeffhandley (co-authored by @​Copilot)
• Fix SQLitePCLRaw.lib.e_sqlite3 vulnerability by replacing SemanticKernel connectors with CommunityToolkit #​7579 by @​adamsitnik (co-authored by @​Copilot)
• Removing SemanticKernel Connectors dependency and replacing it #​7584 by @​adamsitnik (co-authored by @​Copilot)
• Migrate to xUnit v3 #​7607 by @​adamsitnik (co-authored by @​shyamnamboodiripad @​Copilot)

Repository Infrastructure Updates

• Update OTel GenAI conventions skill for standalone semconv-genai repo #​7519 by @​jeffhandley (co-authored by @​Copilot)
• Bump dotnet-coverage from 18.7.0 to 18.8.0 #​7552
• [main] Update dependencies from dotnet/arcade #​7559
• Fix transitive MessagePack vulnerability in AI template AppHost projects #​7561 by @​adamsitnik (co-authored by @​Copilot)
• Bump esbuild, @​vitejs/plugin-react and vite in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7564
• Bump tmp from 0.2.6 to 0.2.7 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7569
• Bump js-yaml from 4.1.1 to 4.2.0 in /src/Libraries/Microsoft.Extensions.AI.Evaluation.Reporting/TypeScript #​7570
• Bump PowerShell from 7.6.2 to 7.6.3 #​7576
• Remove duplicate 'WebAPI' classification from template #​7577 by @​danroth27
• [main] Update dependencies from dotnet/arcade #​7590
• Eliminate redundant Correctness CI stage by merging into Build #​7594 by @​adamsitnik (co-authored by @​Copilot)
• Update Agent Framework to 1.13.0 #​7613 by @​jeffhandley (co-authored by @​Copilot)
  ... (truncated)

Commits viewable in compare view.

Updated Microsoft.Extensions.Caching.Memory from 10.0.9 to 10.0.10.

Release notes

Sourced from Microsoft.Extensions.Caching.Memory's releases.

No release notes found for this version range.

Commits viewable in compare view.

Updated OllamaSharp from 5.4.25 to 5.4.27.

Release notes

Sourced from OllamaSharp's releases.

5.4.27

What's Changed

What's Changed

• Update package dependencies and align Microsoft.Extensions.AI by @​awaescher in Update package dependencies and align Microsoft.Extensions.AI awaescher/OllamaSharp#390

Full Changelog: awaescher/OllamaSharp@5.4.26...5.4.27

5.4.26

What's Changed

What's Changed

• Check .Message for null #​387 by @​awaescher in Check .Message for null #387 awaescher/OllamaSharp#389

Full Changelog: awaescher/OllamaSharp@5.4.25...5.4.26

Commits viewable in compare view.

Updated OpenTelemetry.Exporter.Console from 1.16.0 to 1.17.0.

Release notes

Sourced from OpenTelemetry.Exporter.Console's releases.

1.17.0

For highlights and announcements pertaining to this release see: Release Notes > 1.17.0.

The following changes are from the previous release 1.17.0-rc.1.

• NuGet: OpenTelemetry v1.17.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api v1.17.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api.ProviderBuilderExtensions v1.17.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Console v1.17.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.InMemory v1.17.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.OpenTelemetryProtocol v1.17.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Exporter.Zipkin v1.17.0

  No notable changes.

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Extensions.Hosting v1.17.0

  No notable changes.

... (truncated)

1.17.0-rc.1

The following changes are from the previous release 1.16.0.

• NuGet: OpenTelemetry v1.17.0-rc.1

  • Fixed a metric point reclaim data race on CPU ARM architectures.
    (#​7401)

  • The library is now marked as trim and AOT compatible.
    (#​7441)

  • Replaced the vendored copy of
    EnvironmentVariablesConfigurationProvider with a direct
    Microsoft.Extensions.Configuration.EnvironmentVariables package dependency.
    Consumers gain automatic pickup of upstream bug fixes and security patches;
    no public API or behavioural change.
    (#​7146)

  • Added a verbose OpenTelemetry-Sdk self-diagnostics event that is emitted
    when an activity is dropped because its local (in-process) parent is not
    recorded.
    (#​7427)

  • Added support for a Schema URL on Resource instances.
    (#​7472)

  • Fixed a metric storage leak that occurred when meters and instruments were
    repeatedly created and disposed.
    (#​7466)

  • Added ExcludedTagKeys property to MetricStreamConfiguration to support
    excluding specific tag keys from metric streams.
    (#​7373)

  See CHANGELOG for details.

• NuGet: OpenTelemetry.Api v1.17.0-rc.1

  • Fixed TraceContextPropagator to normalize empty tracestate header values
    to null when extracting trace context.
    (#​7407,
    #​7433)

  • The library is now marked as trim and AOT compatible.
    (#​7441)

  • Experimental (pre-release builds only): Updated EnvironmentVariableCarrier.Get
    to read only the normalized environment variable name, following the updated
    environment variable carrier specification.
    Non-normalized carrier keys are no longer matched, even when they would
    normalize to the requested key.
    ... (truncated)

1.17.0-beta.1

The following changes are from the previous release 1.16.0-beta.1.

• NuGet: OpenTelemetry.Exporter.Prometheus.AspNetCore v1.17.0-beta.1

  • Added a verbose-level diagnostic event for ignored metrics.
    (#​7429)

  • The library is now marked as trim and AOT compatible.
    (#​7441)

  • Fix double unit suffixes in metric names when using OpenMetrics.
    (#​7454)

  • Fix incorrect handling of leading digits in metric names for OpenMetrics.
    (#​7454)

  • Add PrometheusAspNetCoreOptions.ScopeInfoEnabled property to enable or
    disable scope labels in Prometheus metrics. Defaults to true.
    (#​7436)

  • Added support for the dots and values Prometheus UTF-8 name escaping
    schemes when negotiated via the Accept header.
    (#​7439)

  • Add PrometheusAspNetCoreOptions.TargetInfoEnabled property to enable or
    disable the target_info metric in Prometheus metrics. Defaults to true.
    (#​7438)

  • Added support for the allow-utf-8 Prometheus UTF-8 name escaping scheme
    when negotiated via the Accept header.
    (#​7440)

  • Add PrometheusAspNetCoreOptions.ResourceConstantLabels property to select
    resource attributes to add to each metric as constant labels. Defaults to
    null (no resource attributes are added as metric labels).
    (#​7471)

  • Add PrometheusAspNetCoreOptions.MaxScrapeResponseSizeBytes to configure
    the maximum size of a scrape response. The default is now ~166 MiB.
    (#​7487)

  • A scrape whose serialized output exceeds the maximum scrape response size
    limit now responds with HTTP 500.
    (#​7487)

  • Fixed the Prometheus text exposition format emitting redundant comments.
    (#​7491)

  • Made Accept header content negotiation consistent with the
    PrometheusHttpListener endpoint.
    ... (truncated)

Commits viewable in compare view.

Updated System.Threading.RateLimiting from 10.0.9 to 10.0.10.

Release notes

Sourced from System.Threading.RateLimiting's releases.

No release notes found for this version range.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions

---

Summary by cubic

Update .NET dependencies in AI.Shared and ConsoleAI.FunctionalityPipelines to pull in fixes and keep the snippets aligned with Microsoft.Extensions.AI 10.8.1 and OpenTelemetry.Exporter.Console 1.17.0.

• Dependencies
  • Microsoft.Extensions.AI 10.7.0 → 10.8.1 — fixes tool-call ordering with approvals; preserves reasoning item id.
  • OpenTelemetry.Exporter.Console 1.16.0 → 1.17.0 — trim/AOT compatibility and metric fixes.
  • OllamaSharp 5.4.25 → 5.4.27 — aligns with Microsoft.Extensions.AI; null-message guard.
  • Microsoft.Extensions.Caching.Memory 10.0.9 → 10.0.10 — patch update.
  • System.Threading.RateLimiting 10.0.9 → 10.0.10 — patch update.

^{Written for commit d62de2d. Summary will update on new commits.}